dify
1.19.0Build Agentic workflows, RAG pipelines, with rich AI model and tool support on one collaborative workspace. Deploy on cloud, VPC, or self-hosted, so teams move from prototype to production without rebuilding the stack.
- Maintenance
- Active2902 commits in 3 months · bus factor 9
- License
- OtherUnknown
- Security
- 22 advisories8 high, 11 medium, 3 low
- Supported versions
- No scheduleendoflife.date does not track this project
161k stars · 25.5k forks · 1.4k open issues · last release 11 days ago · data checked 1 hour ago
Security advisories
All advisories on GitHubThe 22 most recent advisories published by the maintainers: 8 high, 11 medium, 3 low. Check the patched version against the one you run.
- mediumGHSA-6j8g-rp8v-55vrNov 14, 2026Per-IP Rate Limit Bypass via Spoofable X-Forwarded-For and CF-Connecting-IP Headers
- Affected
- <= 1.17.1
- Patched in
- 1.18.0
- highCVE-2026-105761Aug 19, 2026IDOR in AppMCPServer PUT Endpoint Allows Modification of Other Apps' MCP Servers
- Affected
- 1.14.2
- Patched in
- 1.16.0
- highGHSA-9c9q-5rj5-mjj2Jul 15, 2026Cross-Tenant File Preview via Unscoped Console `file_id`
- Affected
- <=1.13.3
- Patched in
- 1.14.2
- mediumGHSA-fj5w-7rc8-3f3fJul 15, 2026Cross-Tenant External API Usage Enumeration
- Affected
- <=1.13.3
- Patched in
- 1.14.0
- highGHSA-5vmp-5q9h-hmr7Jul 15, 2026Cross-Tenant External API Detail Disclosure
- Affected
- <=1.13.3
- Patched in
- 1.14.0
- highCVE-2026-105762May 19, 2026Unauthenticated Server-Side Request Forgery in /console/api/remote-files/upload endpoint
- Affected
- < 1.13.0
- Patched in
- 1.13.0
- lowGHSA-cg9f-q34p-p9h3May 19, 2026Dify API Extension has SSRF Vulnerability
- Affected
- 0.6.7
- Patched in
- 0.6.8
- mediumCVE-2026-34082Apr 20, 2026IDOR in deleting someone else's chat conversation
- Affected
- <= 1.9.2
- Patched in
- 1.13.1
- mediumCVE-2026-42138Apr 20, 2026Stored XSS via SVG-file upload
- Affected
- <= 1.9.2
- Patched in
- 1.13.1
- mediumCVE-2026-21866Mar 3, 2026Dify - Stored XSS in chat
- Affected
- 1.10.1
- Patched in
- 1.11.2
- lowCVE-2026-28288Feb 27, 2026User enumeration
- Affected
- <= 1.8.1
- Patched in
- 1.9.0
- mediumGHSA-fw4f-cghv-2v33Feb 11, 2026Use of Cryptographically Weak Pseudo-Random Number Generator for API Key Generation
- Affected
- < v1.4.2
- Patched in
- v1.4.2
- highCVE-2026-26023Feb 11, 2026Client‑side DOM XSS in the web chat app of Dify when using echarts
- Affected
- <= V1.11.4
- highCVE-2025-67732Jan 4, 2026Plaintext API Key Exposure via Model Provider Configuration Endpoint
- Affected
- <= 1.10.1-fix.1
- Patched in
- 1.11.0
- highCVE-2025-58747Oct 17, 2025Dify MCP OAuth Flow Vulnerable to XSS
- Affected
- <=1.8.0
- Patched in
- 1.8.0
- mediumCVE-2025-59422Sep 24, 2025Broken Access Control on Log Message Endpoint Allows Reading Chats of Others
- Affected
- 1.8.1
- Patched in
- 1.9.0
- mediumCVE-2025-49149Jun 16, 2025Dify has xss vulnerability
- Affected
- 1.2.0
- Patched in
- 1.4.2
- lowCVE-2025-43854Apr 28, 2025DIFY vulnerable to Clickjacking Attack
- Affected
- <= v0.6.8
- Patched in
- None
- highCVE-2025-43862Apr 25, 2025Unauthorized Access and Modification of APP Orchestration
- Affected
- <= v0.6.8
- mediumCVE-2025-32795Apr 18, 2025Insecure User Role Access Control for APP Editing
- Affected
- <= v0.6.8
- Patched in
- None
- mediumCVE-2025-32796Apr 18, 2025Unauthorized APP Enable/Disable via API
- Affected
- <= v0.6.8
- Patched in
- None
- mediumCVE-2025-32790Apr 17, 2025Insecure User Role Access Control for APP DSL Exporting
- Affected
- <= v0.6.8
- Patched in
- None